Fix and improve handling for geni users who are not in any project at the GPO

This still needs work, it would be handy if the user could "promote" to a real user, but that path needs work. In the meantime we need to show them more clearly that they cannot do anything if they do not have any project membership.